HUAWEI-NAC-MIB

All MIBs › HUAWEI-NAC-MIB

Organization: Huawei Technologies Co.,Ltd.

Last Updated: 2012-05-15

Category: Domain: Security, RADIUS and AAA, Vendor: Huawei

Description: Huawei NAC (Network Admission Control) MIB for managing endpoint compliance checking and network access policy enforcement.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is HUAWEI-NAC-MIB?

HUAWEI-NAC-MIB is a Huawei enterprise MIB supporting a proprietary Network Admission Control-like discovery protocol described in the source as based on the Ethernet slow-protocol framework, used for automatic discovery and zero-touch configuration of newly connected Huawei devices. Per its module description it defines two tables and three trap notifications, though no specific object names were provided in the source data for this batch. Its likely monitoring role centers on software/protocol status: detecting when a neighboring device has been auto-discovered and auto-configured, and generating traps for discovery events or configuration-commissioning outcomes, rather than exposing hardware sensor data. It depends on an underlying Ethernet slow-protocol (similar in spirit to LACP/802.3ah OAM) as its transport mechanism rather than a specific IETF MIB. It would be deployed in Huawei enterprise or campus networks to enable zero-touch provisioning of newly installed switches or access devices.

IPNetwork Monitor allows you to monitor SNMP objects defined in HUAWEI-NAC-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Huawei switch/access device supporting NAC-style auto-discovery

Monitoring Examples

No sample object names were supplied for this module, so specific OIDs cannot be confirmed from the source data; per the module description, the two tables would track discovered neighbor devices, and the three traps would signal discovery or auto-configuration events (e.g., a new device joining the NAC-managed segment). An operator would use these traps to confirm that a newly racked Huawei device was automatically discovered and commissioned without manual CLI configuration, a workflow that starts with a HUAWEI-NAC-MIB download to load the definitions into the network management system.

Imported Objects

From BRIDGE-MIB

dot1dStpPortEntry

From HUAWEI-DEVICE-MIB

hwFrameIndex	OBJECT-TYPE
hwPortIndex	OBJECT-TYPE
hwSlotIndex	OBJECT-TYPE

From HUAWEI-MIB

huaweiMgmt

OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

MacAddress
RowStatus

OIDs

OID symbolic	OID numeric	Type	Access	Description
hwNacExt	1.3.6.1.4.1.2011.5.117			This MIB file defines the MIB objects of the neighbor automatic communication (NAC) protocol. This MIB file contains two tables and three trap nodes. The NAC module uses the proprietary protocol that is based on the Ethernet slow protocol. The NAC module achieves automatic discovery and automatic configuration of new devices, that is, free-of-onsite software commissioning.
hwNacMibObjects	1.3.6.1.4.1.2011.5.117.1
hwDslamNacMasterConfigTable	1.3.6.1.4.1.2011.5.117.1.1		not-accessible	This node is used to manage the configuration information to be sent to the slave node. The index of this table is ifIndex.
hwDslamNacMasterConfigEntry	1.3.6.1.4.1.2011.5.117.1.1.1		not-accessible	This node is used to manage the configuration information to be sent to the slave node. The index of this entry is ifIndex.
I32 hwDslamNacSlaveVlan	1.3.6.1.4.1.2011.5.117.1.1.1.1	Integer32	read-write	Indicates the VLAN ID of the NAC channel, ranging from 1 to 4093. In response to the get or get_next operation, the invalid value 4096 returned indicates that the VLAN ID is not configured. This node is mandatory for the configuration of NAC parameters.
I32 hwDslamNacSlaveVlanPriority	1.3.6.1.4.1.2011.5.117.1.1.1.2	Integer32	read-write	Indicates the VLAN priority. In response to the get or get_next operation, the invalid value 255 returned indicates that the VLAN priority is not configured. This node is optional for the configuration of NAC parameters. The default VLAN priority is 0.
IP hwDslamNacSlaveIpAddress	1.3.6.1.4.1.2011.5.117.1.1.1.3	IpAddress	read-write	Indicates the IPv4 address of the NAC channel. In response to the get operation, the invalid value 255.255.255.255 indicates that the IPv4 address is not configured. This node is mandatory for the configuration of NAC parameters.
IP hwDslamNacSlaveIpMask	1.3.6.1.4.1.2011.5.117.1.1.1.4	IpAddress	read-write	Indicates the subnet mask of the IPv4 address for the NAC channel. In response to the get operation, the invalid value 0.0.0.0 indicates that the subnet mask is not configured. This node is mandatory for the configuration of NAC parameters.
IP hwDslamNacSlaveGateway	1.3.6.1.4.1.2011.5.117.1.1.1.5	IpAddress	read-write	Indicates the default gateway of the NAC channel. In response to the get operation, the invalid value 255.255.255.255 indicates that the default gateway is not configured. This node is optional for the configuration of NAC parameters.
OCT hwDslamNacSlaveSnmpProfileName	1.3.6.1.4.1.2011.5.117.1.1.1.6	OCTET STRING	read-write	Indicates the name of the SNMP profile for the NAC channel. In response to the get operation, the invalid value, a null character string, indicates that the name of the SNMP profile is not configured. This node is optional for the configuration of NAC parameters.
ROW hwDslamNacRowstaus	1.3.6.1.4.1.2011.5.117.1.1.1.7	RowStatus	read-write	RowStatus. 1. active(1) -indicates the query or set operation. 2. createAndGo(4) -indicates sending a nac config 3. destroy(6) -indicates disabling nac
hwDslamNacSlaveInfoTable	1.3.6.1.4.1.2011.5.117.1.2		not-accessible	This node is used to record the information about the slave node, including its MAC address, type, subrack, slot, port, automatic discovery result, configuration result, and configuration failure cause. The index of this table is ifIndex.
hwDslamNacSlaveInfoEntry	1.3.6.1.4.1.2011.5.117.1.2.1		not-accessible	This node is used to record the information about the slave node, including its MAC address, type, subrack, slot, port, automatic discovery result, configuration result, and configuration failure cause. The index of this entry is ifIndex.
MAC hwDslamNacSlaveMac	1.3.6.1.4.1.2011.5.117.1.2.1.1	MacAddress	read-only	Indicates the MAC address of the NAC slave node. This node is read-only.
OCT hwDslamNacSlaveType	1.3.6.1.4.1.2011.5.117.1.2.1.2	OCTET STRING	read-only	Indicates the device type of the NAC slave node, in the form of a character string. This node is read-only.
I32 hwDslamNacSlaveIfFrameId	1.3.6.1.4.1.2011.5.117.1.2.1.3	Integer32	read-only	Indicates the subrack ID of the slave port on the slave node. This node is read-only.
I32 hwDslamNacSlaveIfSlotId	1.3.6.1.4.1.2011.5.117.1.2.1.4	Integer32	read-only	Indicates the slot ID of the slave port on the slave node. This node is read-only.
I32 hwDslamNacSlaveIfPortId	1.3.6.1.4.1.2011.5.117.1.2.1.5	Integer32	read-only	Indicates the port ID of the slave port on the slave node. This node is read-only.
INT hwDslamNacSlaveFindResult	1.3.6.1.4.1.2011.5.117.1.2.1.6	INTEGER	read-only	Indicates the automatic discovery result of the slave port. This node is read-only. Options: 1. notfound(1) -indicates that the slave port is not discovered. The state of the automatic discovery state machine is NULL or INIT and the master node does not receive an active-close message from the slave node, or the state of the automatic discovery state machine is detecting. 2. detected(2) -indicates that the slave port is discovered. The state of the automatic discovery state machine is established or pending. 3. activeclose(3) -indicates that the slave port is actively closed. The state of the automatic discovery state machine is INIT and the master node receives an active close message from the slave node.
INT hwDslamNacSlaveConfigResult	1.3.6.1.4.1.2011.5.117.1.2.1.7	INTEGER	read-only	Indicates the neighbor configuration result. This node is read-only. Options: 1. none(1) -indicates that the slave node is not configured. 2. configuring(2) -indicates that the slave node is being configured. 3. addok(3) -indicates that the slave node is successfully configured. 4. addfail(4) -indicates that the slave node fails to be configured. 5. delok(5) -indicates that the configuration of the slave node is successfully deleted. 6. delfail(6) -indicates that the configuration of the slave node fails to be deleted.
INT hwDslamNacSlaveConfigFailReason	1.3.6.1.4.1.2011.5.117.1.2.1.8	INTEGER	read-only	Indicates the cause of the failure to configure NAC parameters of the slave port. This node is valid only when the the of hwDslamNacSlaveConfigResult is failed(4). This node is read-only. Options: 1. timeout(1) -indicates configuration timeout. 2. vlanconflict(2) -indicates VLAN ID conflict. 3. unknownparameter(3) -indicates unknown parameters. 4. exist(4) -indicates that the configuration already exists. 5. other(5) -indicates other errors.
hwNacTraps	1.3.6.1.4.1.2011.5.117.2
hwNacCommonTraps	1.3.6.1.4.1.2011.5.117.2.1
hwNacCommonTrapsPrefix	1.3.6.1.4.1.2011.5.117.2.1.0
NTF hwNacNeighborFindTrap	1.3.6.1.4.1.2011.5.117.2.1.0.1			Indicates the neighbor discovery trap. This SNMP trap is generated when the neighbor is discovered.
NTF hwNacNeighborDisappearTrap	1.3.6.1.4.1.2011.5.117.2.1.0.2			Indicates the neighbor disappearance trap. This SNMP trap is generated when the neighbor disappears.
NTF hwNacConfigOkTrap	1.3.6.1.4.1.2011.5.117.2.1.0.3			Indicates the configuration success trap. This SNMP trap is generated when the NAC parameters are successfully configured.

RFC description

Neighbor automatic communication (NAC) protocol MIB for device discovery and auto-configuration.

Start monitoring Huawei switch/access device supporting NAC-style auto-discovery/zero-touch config with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download HUAWEI-NAC-MIB

What Is HUAWEI-NAC-MIB?

Supported Devices

Monitoring Examples

This MIB depends on

Related MIBs

RFC description